AdGuardHome fills the same gap, doesn't it?
Show HN: Sinkzone DNS – Forwarder that blocks everything except your allowlist
21–30 of 47 posts
Re: Show HN: Sinkzone DNS – Forwarder that blocks everything except your allowlist
#22Re: Show HN: Sinkzone DNS – Forwarder that blocks everything except your allowlist
#23Re: Show HN: Sinkzone DNS – Forwarder that blocks everything except your allowlist
#24AdGuardHome fills the same gap, doesn't it?
I'm not familiar with this project, just checked their GitHub Readme and if I understand correctly they block what you want them to block. Sinkzone does the opposite, it allows what you want to allow, and blocks everything else.
Re: Show HN: Sinkzone DNS – Forwarder that blocks everything except your allowlist
#25Re: Show HN: Sinkzone DNS – Forwarder that blocks everything except your allowlist
#26Re: Show HN: Sinkzone DNS – Forwarder that blocks everything except your allowlist
#27Currently, when I need to focus, I use a separate device configured to block everything except 2-3 domains I really need to minimize distractions. What really makes Sinkzone interesting is the scheduling with focus mode which can be incredible useful. My current firewall, OpenSnitch only lets you toggle all rules at once, so Sinkzone could be useful for allowing just the focus domains.
I think a useful feature to consider is having different profiles which would essentially be collections of domains to allow. So you could have "focus", but also "work" or "kids" as well allowing for more flexibility.
As I previously mentioned, I'm currently using OpenSnitch [1] as a system-level firewall that has a similar allowlist-only functionality. While the popups to allow/reject a connection initially disturb your workflow, after a short period of usage, you end up with a small collection of rules and you'll pretty much only see them again when browsing new websites. The advantage over DNS-level blocking is that you also get to block per process and not just device (or network). Since it uses eBPF, processes can't get around it by using a different DNS server or something. I'm really missing profiles and scheduling though, so I hope you can build a viable alternative to switch to!
Re: Show HN: Sinkzone DNS – Forwarder that blocks everything except your allowlist
#28Re: Show HN: Sinkzone DNS – Forwarder that blocks everything except your allowlist
#29Earlier quoted context omitted.
I'm not familiar with this project, just checked their GitHub Readme and if I understand correctly they block what you want them to block. Sinkzone does the opposite, it allows what you want to allow, and blocks everything else.
Well, you can block everything using a wildcard blocking rule (for that, go to "Filters → DNS blocklists" and add this custom rule: ||*^ ) and then you can allow the domain (and subdomains, if needed, for instance "everything.ycombinator.com"; for that, go to "Filters → Allowlist" and add this: @@||ycombinator.com^ )
Blocks everything except example.org and example.com.
Works in AdGuard Home, AdGuard DNS or any other AG product with DNS filtering capabilities: https://adguard-dns.io/kb/general/dns-filtering-syntax/
Re: Show HN: Sinkzone DNS – Forwarder that blocks everything except your allowlist
#30Interesting approach... Initially I thought it was bit overkill but I found myself picking my phone when I have a site blocked on my laptop. Happen more than I'm willing to admit, so I guess I will give a try
I'm planning to address the issue for phones as well in the future.
My suggestion: Allow by ASN would be a clean (simple) way to get all of Google, etc., allowed at once.
[1] https://github.com/proxylity/examples/tree/main/dns-filter